內容簡介
User Access Blocker 是一款強大的 WordPress 外掛，讓管理員能夠暫時或永久封鎖用戶訪問，而不需刪除其帳戶。此外掛適合用於調查期間暫停用戶訪問、因未付款暫時停用帳戶，以及封鎖問題用戶同時保留其內容。
【主要功能】
• 簡易切換：用戶資料頁面上有「封鎖訪問」/「解除封鎖」按鈕
• 即時效果：封鎖用戶後立即無法登入
• AJAX 支援：無需刷新頁面即可封鎖/解除封鎖用戶
• 安全性：多重權限檢查及 nonce 驗證
• 非破壞性：用戶帳戶及資料保持完整
• 僅限管理員：只有管理員可封鎖/解除封鎖用戶
外掛標籤
開發者團隊
原文外掛簡介
User Access Blocker is a simple yet powerful WordPress plugin that allows administrators to temporarily or permanently block user access without deleting their accounts. This is perfect for situations where you need to:
Suspend user access during investigations
Temporarily disable accounts for non-payment
Block problematic users while preserving their content
Manage user access during maintenance or transitions
Key Features
Easy Toggle: Simple “Block Access” / “Unblock Access” button on user profiles
Instant Effect: Blocked users are immediately prevented from logging in, and any active session is terminated on the spot
AJAX Powered: Block/unblock users without page refresh
Secure: Multiple permission checks and nonce verification
Non-Destructive: User accounts, posts, and data remain intact
Admin Only: Only administrators can block/unblock users
Self-Protection: Administrators cannot block themselves
Activity Logging: All block/unblock actions are logged for security audits
Clean Uninstall: Removes all plugin data when deleted
How It Works
Navigate to any user’s profile page in WordPress admin
Scroll to the “User Access Blocker” section
Click “Block Access” to prevent the user from logging in — if they are currently logged in, they will be logged out immediately
Click “Unblock Access” to restore their access
Blocked users will see: “Your access has been blocked by an administrator.”
Security Features
Administrator-only functionality
Nonce verification on all actions
Permission checks at multiple levels
Data sanitization and validation
Secure AJAX implementation
XSS protection through proper escaping
Activity logging for audit trails
Developer Information
Hooks and Filters
The plugin uses standard WordPress hooks:
authenticate – To check if a user is blocked during login
show_user_profile / edit_user_profile – To add the block button
personal_options_update / edit_user_profile_update – To save block status
wp_ajax_uabx_toggle_user_block – For AJAX functionality
Database
The plugin stores block status in user meta:
* Meta key: uabx_user_blocked
* Meta value: ‘1’ (blocked) or ‘0’ (not blocked)
Uninstall
The plugin includes a proper uninstall routine that removes all plugin data from the database when deleted through the WordPress admin.
Support
For support, feature requests, or bug reports, please visit plugin support forum or GitHub repository.
Privacy Policy
This plugin does not collect any personal data. It only stores block status as user metadata within your WordPress database. No data is sent to external servers.
The plugin logs block/unblock actions to your server’s error log for security audit purposes. These logs remain on your server and are not transmitted elsewhere.
